copy url from application pages

Posted on 2004-10-08
Medium Priority
Last Modified: 2013-12-24
I have an application that people need to log into.  If you log in and then go to the address bar - you copy the url - close the browser (this ends the session) Open IE and then paste the copied url into the address bar - you get right into the application - no login screen!  Anyone know why the application.cfm is not controlling this?
Question by:ahillman

Expert Comment

ID: 12262671
I am not sure. These types of things sometimes have a variety of causes. I think it might help narrow down the possibilities if we had a better idead of what was going on in Application.cfm. What kind of verification algorithm are you using. Did you write your own session management code, or are you using <cflogin>/<cflogout>?


Expert Comment

ID: 12262853
We store the session info in the client scope and the session scope and compare each call via the application.cfm.  If the two values don't match, we assume the user has closed their browser and need to login again.

<cfif Client.browserSession NEQ session.SessionID>
  <cflocation url="login.cfm">

Once the user has been authenticated in the login.cfm
<cfif IsDefined("cookie.jsessionid")>
  <cfset Client.browserSession = cookie.jsessionid>

LVL 17

Expert Comment

ID: 12263012
yes, because the user did not log out, i.e. the variables still exist
closing the browser does not end the session, the session variables still exist in memory on the server - users accesses the application again and the cookie still exists on the users machine, so its just like they never been gone.

You can set cookies to expire when the browser closes, and when they access the application again it should not let them in, however the session variables still exists in memory on the server if they have not explicitly been destroyed (ofcourse they will time out after the period defined in the application tag)..
LVL 17

Accepted Solution

Tacobell777 earned 250 total points
ID: 12263026

Author Comment

ID: 12275313
Makes lots of sense - I was under the impression that the session is killed when the browser is closed - wrong assumption obviously.  So - lets say i decided to bookmark or save a url that would take me directly into the application at a later date.  This wouldn't work after the session has ended on my server correct?  Good to know.  If I wanted to have the session end when the browser is closed and have the cookie go away at the same time - what would be the proper coding? This isn't a security risk for this particular application but could be for another one that is in the works.

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Lease-to-own eliminates the expenditure of hardware replacement and allows you to pay off the server over time. Usually, this is much cheaper than leasing servers. Think of lease-to-own as credit without interest.
When it comes to security, close monitoring is a must. According to WhiteHat Security annual report, a substantial number of all web applications are vulnerable always. Monitis offers a new product - fully-featured Website security monitoring and pr…
How to fix display issue, screen flickering issue when I plug in power cord to the machine. Before I start explaining the solution lets check out once the issue how it looks like after I connect the power cord. most of you also have faced this…
Hi, this video explains a free download that you can incorporate into your Access databases, or use stand-alone for contact management. Contacts -- Names, Addresses, Phone Numbers, eMail Addresses, Websites, Lists, Projects, Notes, Attachments…

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question